last executing test programs: 1m18.472041857s ago: executing program 1 (id=927): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001400), 0x3, 0x57a, &(0x7f0000001b40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) 1m18.100245738s ago: executing program 1 (id=929): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x238, 0x0, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [], [], 'erspan0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1m16.920190084s ago: executing program 1 (id=932): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x0, 0x10000, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 1m16.738819438s ago: executing program 1 (id=935): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x4}, {0x2, 0x3}}}}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x18}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xe00, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1m16.085040202s ago: executing program 1 (id=939): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="010000005cc135121e", 0x9}], 0x1, 0x0, 0x0) 1m15.846290542s ago: executing program 1 (id=941): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 1m7.276634271s ago: executing program 3 (id=965): syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xca, 0x20, 0xd6, 0x8, 0x471, 0x602, 0x715a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x71, 0x5c, 0x31}}]}}]}}, 0x0) 1m4.204420491s ago: executing program 3 (id=972): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = dup2(r0, r1) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) 1m4.070648322s ago: executing program 3 (id=973): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) rmdir(&(0x7f0000000280)='./file2\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="c1d958253abf6d8cd956be64c777b8a7"}}) 1m0.969043645s ago: executing program 3 (id=975): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0), 0x1, 0x4f7, &(0x7f0000000540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001300010500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080013"], 0x3c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000380)='./bus\x00', r2, &(0x7f0000000400)='./file1\x00', 0x4) renameat2(r0, &(0x7f0000000380)='./bus\x00', r0, &(0x7f0000000400)='./file1\x00', 0x2) 59.732984216s ago: executing program 3 (id=979): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000006d001900040000000000", @ANYBLOB="00000000000000002c003480140037"], 0x4c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/262, 0x106}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) close(r3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000010e40)={0x2020}, 0x2020) futex(&(0x7f0000000080), 0x0, 0x2, 0x0, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x200140, 0x0) clock_gettime(0x0, &(0x7f0000000280)) write$input_event(r4, 0x0, 0x0) 58.864015756s ago: executing program 2 (id=980): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700000b100001900000008000300", @ANYRES32=r3, @ANYBLOB="05001d008000000006006d"], 0x2c}}, 0x0) 58.157409545s ago: executing program 2 (id=981): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21081e, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@nobarrier}, {@nolazytime}]}, 0x1, 0x51d, &(0x7f0000000a40)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000040)=ANY=[], 0xe01, 0x0) unlink(&(0x7f0000000a00)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="18", 0x1}], 0x1, 0xffff, 0x0, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x20, 0x6000, 0x10000) 57.34814457s ago: executing program 2 (id=982): r0 = syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x1117, &(0x7f00000024c0)="$eJzs2cFq1FAUBuD/JqPtbiTug6ALF1JaxgewC4XZutWNSEGwqw4Iiq/hG/gWvoJ25b50r4uCSyESM3GqDKh0KgjfB8k9OcnJyV3emwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvknwqyfUqacZclaQkbXs8P03Sjvlr7+sqJQ8P5ov7R7MHiyT198fLo6T0VX1Zmr2b282smTV7zd17+7c+LF6+ev7k8PDgaPmakjYnZxudRRlP9flc2WgPAAAA+G91FzbNmxd/0unqJfUHAAAAfmfT+wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6ubruJmDKokJWnb4/lpknZN3ZV/9H0AAADAxZVUeTxdlx+2AVbu5OO0/Mj345fSx7t5u6YeAAAAWHn27qfLbmsZnP+//rUb9Ovu25kM6/Lt4d6NTLKzM8TLIZ/3kzrJ7i+9Ts5ePx2P0tXJ1uXMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//YwzhLg==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88cabf65767e9dbbd7b5841a8ce3eb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e00"/231, @ANYRES8, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x3a5ffd) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ftruncate(r1, 0x4008c0d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/165, 0xa5) 55.052324628s ago: executing program 3 (id=984): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x9764, &(0x7f0000012f40)="$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") chdir(0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) llistxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x2) 54.975725094s ago: executing program 2 (id=985): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000000040), 0x0}) prlimit64(0x0, 0x7, &(0x7f00000008c0), 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 54.120857314s ago: executing program 2 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x112c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 53.462713737s ago: executing program 2 (id=988): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000008c40)='./file0/file0\x00', 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}]}]}, 0x30}}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r3, &(0x7f00000019c0)={'#! ', './file0', [{0x20, '\x06^-'}, {0x20, 'gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'}]}, 0x488) close(r3) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000340)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\f\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f00000007c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000000c40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f00000010c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000001540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'], &(0x7f00000001c0)=[&(0x7f0000001e80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000002b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00']) r4 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) brk(0x20ffc000) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4040000, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) shutdown(r4, 0x0) 22.069720859s ago: executing program 0 (id=1006): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000d00000034001680300001802c000c8014000100000000000000000000000000000000001400010000000000000000000000000000000000140003006e657464657673696d30000000000000040014"], 0x6c}}, 0x0) 21.896132763s ago: executing program 4 (id=1007): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 21.696156469s ago: executing program 4 (id=1008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 21.432030351s ago: executing program 0 (id=1009): r0 = socket(0x1e, 0x4, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000340), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xa616}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 21.19832206s ago: executing program 0 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001c0001"], 0x1c}}, 0x0) 21.091034399s ago: executing program 0 (id=1011): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r0, 0x8918, 0x0) 20.82409986s ago: executing program 4 (id=1012): mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000004000/0x1000)=nil) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000400), 0x10) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) 20.819718831s ago: executing program 0 (id=1013): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x102, &(0x7f0000000400)=""/258, 0x0, 0x0, '\x00', r1}, 0x90) 20.417314374s ago: executing program 4 (id=1014): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000500)=""/75}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r3}, &(0x7f0000000300)) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0xfffffffffffffffc]}, 0x8) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) readv(r4, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000200)=""/37, 0x25}], 0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085200000730000008525"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 20.028195386s ago: executing program 4 (id=1015): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) 19.869585988s ago: executing program 4 (id=1016): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x0, 0x0) r2 = dup3(r0, r0, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="120100327485a21047be4141a30bf10000000040100802000000000000010902"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x4000000000) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000200)="33568c", 0x3}, {&(0x7f0000000780)="b7b5a35a9a6711b2ce0fee6a1d1a85e3383f8ca4f5eb669fe0c2037917c77acbed37da3ab8524ff68c7f80663784c3a2f068b55fec1d3649e14bc892928ae838b72187a2528412eafb15d0732c38e5717a25638ba04cccbb6ddef21b975c8bf79920d58501a55a7bf140718a4b929c88ce581f851ff08111718530f7c879498eda6c796fda315c0a9720a6f8a3e1e63da01a516a4be7e28a809eb94da0a3970f24766c23a262d73afb99fa7c823a953b248d9fbc20a5ec2205c716948652567e61c11a18036faaf8ee3af65b693edd71", 0xd0}, {&(0x7f0000000f80)="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", 0xe96}], 0x3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xec, 0x66, 0x7d, 0x40, 0x4dd, 0x9032, 0xfd0b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) 0s ago: executing program 0 (id=1017): r0 = socket(0x1e, 0x4, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000340), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xa616}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): h: 249 > 9 [ 233.859491][ T3554] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.867735][ T3554] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.875374][ T3554] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.935990][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.970401][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.987114][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.008186][ T3825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.055145][ T3825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.092809][ T3824] device hsr_slave_0 left promiscuous mode [ 234.099757][ T3824] device hsr_slave_1 left promiscuous mode [ 234.164140][ T6556] ptrace attach of "./syz-executor exec"[3557] was attempted by "./syz-executor exec"[6556] [ 234.239049][ T3824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.346580][ T3824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.438108][ T3824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.500726][ T3824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.594090][ T3824] device bridge_slave_0 left promiscuous mode [ 234.655670][ T3824] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.959460][ T3824] device veth1_macvtap left promiscuous mode [ 234.978845][ T3824] device veth0_macvtap left promiscuous mode [ 234.988700][ T3824] device veth1_vlan left promiscuous mode [ 235.002220][ T3824] device veth0_vlan left promiscuous mode [ 235.117957][ T6544] loop2: detected capacity change from 0 to 40427 [ 235.142656][ T3564] Bluetooth: hci1: command tx timeout [ 235.148694][ T6544] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 235.162138][ T6544] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 235.217618][ T6544] F2FS-fs (loop2): Found nat_bits in checkpoint [ 235.417315][ T6544] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 235.440867][ T6544] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 236.102114][ T3564] Bluetooth: hci0: command tx timeout [ 236.283246][ T3824] team0 (unregistering): Port device team_slave_1 removed [ 236.343390][ T3824] team0 (unregistering): Port device team_slave_0 removed [ 236.426742][ T3824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.520781][ T3824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.538367][ T5853] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 237.706269][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.717615][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.728512][ T5853] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 237.737838][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.748287][ T5853] usb 4-1: config 0 descriptor?? [ 237.952773][ T5041] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 238.051162][ T3824] bond0 (unregistering): Released all slaves [ 238.138765][ T6439] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.152193][ T5856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.182528][ T3564] Bluetooth: hci0: command tx timeout [ 238.202231][ T5041] usb 3-1: Using ep0 maxpacket: 8 [ 238.211213][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.228959][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.252038][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.259257][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.271946][ T5853] wacom 0003:056A:0325.0009: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.3-1/input0 [ 238.292218][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.301325][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.319124][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.326375][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.342131][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.342199][ T5041] usb 3-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 238.360824][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.368977][ T5041] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.435253][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.440546][ T5853] usb 4-1: USB disconnect, device number 7 [ 238.445097][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.459672][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.487965][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.503062][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.512810][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.531378][ T6439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.545857][ T6439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.581992][ T5041] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=9e.7e [ 238.597586][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.613081][ T5041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.627527][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.642173][ T5041] usb 3-1: Product: syz [ 238.648078][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.661814][ T5041] usb 3-1: Manufacturer: syz [ 238.666483][ T5041] usb 3-1: SerialNumber: syz [ 238.672777][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.686745][ T5041] usb 3-1: config 0 descriptor?? [ 238.702216][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.733370][ T5041] usbtest 3-1:0.0: couldn't get endpoints, -22 [ 238.745526][ T5041] usbtest: probe of 3-1:0.0 failed with error -22 [ 239.030617][ T5853] usb 3-1: USB disconnect, device number 6 [ 239.085106][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 239.240080][ T6611] loop3: detected capacity change from 0 to 164 [ 239.275460][ T6615] loop1: detected capacity change from 0 to 1024 [ 239.288134][ T6611] Unable to read rock-ridge attributes [ 239.348402][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.353177][ T6611] Unable to read rock-ridge attributes [ 239.362876][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.371166][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.376109][ T6615] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 239.395834][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.408386][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.437991][ T6551] device bridge_slave_0 entered promiscuous mode [ 239.490711][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.529005][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.559479][ T6551] device bridge_slave_1 entered promiscuous mode [ 239.573052][ T6265] EXT4-fs (loop1): unmounting filesystem. [ 239.800554][ T5856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.810233][ T5856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.843826][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.933870][ T6622] ptrace attach of "./syz-executor exec"[3557] was attempted by "./syz-executor exec"[6622] [ 240.172673][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.342704][ T3564] Bluetooth: hci0: command tx timeout [ 240.708679][ T6551] team0: Port device team_slave_0 added [ 240.771464][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.804574][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.833933][ T6551] team0: Port device team_slave_1 added [ 240.894003][ T3554] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 240.949430][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.997893][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.015763][ T6439] device veth0_vlan entered promiscuous mode [ 241.057789][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.072072][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.106686][ T3554] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 241.150952][ T6641] netlink: 'syz.2.936': attribute type 6 has an invalid length. [ 241.163943][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.196215][ T6638] device vlan2 entered promiscuous mode [ 241.212224][ T6638] device caif0 entered promiscuous mode [ 241.257130][ T6644] syz.3.933 (6644): attempted to duplicate a private mapping with mremap. This is not supported. [ 241.258100][ T6638] device caif0 left promiscuous mode [ 241.397230][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 241.407071][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 241.436269][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.465304][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.587090][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.631970][ T6439] device veth1_vlan entered promiscuous mode [ 241.740557][ T6649] overlayfs: statfs failed on './file0' [ 241.791014][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.801201][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.844209][ T6551] device hsr_slave_0 entered promiscuous mode [ 241.851590][ T6551] device hsr_slave_1 entered promiscuous mode [ 241.867857][ T6439] device veth0_macvtap entered promiscuous mode [ 242.034700][ T6439] device veth1_macvtap entered promiscuous mode [ 242.256302][ T6661] ptrace attach of "./syz-executor exec"[3557] was attempted by "./syz-executor exec"[6661] [ 242.421839][ T3554] Bluetooth: hci0: command tx timeout [ 243.076392][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.093453][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.107901][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.120716][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.134182][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.162381][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.181784][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.201862][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.224057][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.251295][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.280352][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.300492][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.339860][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.367049][ T6667] loop2: detected capacity change from 0 to 512 [ 243.384954][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.406723][ T6667] ext4: Unknown parameter 'noacl' [ 243.412613][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.423305][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.434426][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.450429][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.451875][ T3591] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 243.468955][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.481058][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.499914][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.531874][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.544661][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.557607][ T6439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.567532][ T6439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.578550][ T6439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.587747][ T6439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.609173][ T6654] loop1: detected capacity change from 0 to 40427 [ 243.629340][ T6654] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 243.648489][ T6654] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 243.682243][ T6551] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.750678][ T6654] F2FS-fs (loop1): Found nat_bits in checkpoint [ 243.773853][ T6551] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.801762][ T5468] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 243.809336][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.825588][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.862153][ T3591] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 243.878432][ T6551] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.886858][ T3591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.915082][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.917150][ T3591] usb 4-1: config 0 descriptor?? [ 243.929337][ T6654] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 243.934046][ T3656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.951946][ T6654] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 243.993817][ T3591] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 244.001312][ T3656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.021285][ T6551] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.036226][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 244.117520][ T5468] usb 3-1: Using ep0 maxpacket: 8 [ 244.332125][ T3591] gspca_sn9c2028: read1 error -32 [ 244.350657][ T6675] loop0: detected capacity change from 0 to 64 [ 244.373475][ T5468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 244.414543][ T5468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.448736][ T5468] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.468362][ T5468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 244.487382][ T5468] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 244.499044][ T5468] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 244.513573][ T5468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.612828][ T5468] usb 3-1: config 0 descriptor?? [ 244.628594][ T3591] gspca_sn9c2028: read1 error -71 [ 244.634593][ T6667] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 244.642584][ T3591] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 244.669703][ T3591] usb 4-1: USB disconnect, device number 8 [ 245.118787][ T3591] usb 3-1: USB disconnect, device number 7 [ 245.127434][ T3554] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 245.623376][ T5469] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 246.018995][ T5469] usb 4-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 246.032847][ T5469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.048884][ T5469] usb 4-1: config 0 descriptor?? [ 246.093245][ T5469] lan78xx 4-1:0.0 (unnamed net_device) (uninitialized): USB bus speed not supported [ 246.110777][ T5469] lan78xx: probe of 4-1:0.0 failed with error -5 [ 246.201888][ T5468] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.300168][ T5469] usb 4-1: USB disconnect, device number 9 [ 246.592065][ T5468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.617735][ T5468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.657664][ T5468] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 246.687870][ T5468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.713534][ T5468] usb 3-1: config 0 descriptor?? [ 246.925552][ T6551] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.035144][ T6551] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.076463][ T6551] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.183385][ T6551] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.217599][ T5468] wacom 0003:056A:0325.000A: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.2-1/input0 [ 247.445289][ T3591] usb 3-1: USB disconnect, device number 8 [ 248.208153][ T6713] overlayfs: statfs failed on './file0' [ 248.252287][ T6654] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 248.265356][ T6654] syz.1.941: attempt to access beyond end of device [ 248.265356][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.281825][ T6654] syz.1.941: attempt to access beyond end of device [ 248.281825][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.299178][ T6654] syz.1.941: attempt to access beyond end of device [ 248.299178][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.313880][ T6654] syz.1.941: attempt to access beyond end of device [ 248.313880][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.330229][ T6654] syz.1.941: attempt to access beyond end of device [ 248.330229][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.348475][ T6654] syz.1.941: attempt to access beyond end of device [ 248.348475][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.364587][ T6654] syz.1.941: attempt to access beyond end of device [ 248.364587][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.380853][ T6654] syz.1.941: attempt to access beyond end of device [ 248.380853][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.397077][ T6654] syz.1.941: attempt to access beyond end of device [ 248.397077][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.413422][ T6654] syz.1.941: attempt to access beyond end of device [ 248.413422][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 249.118693][ T5469] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 249.217114][ T6709] loop0: detected capacity change from 0 to 40427 [ 249.261263][ T6709] F2FS-fs (loop0): invalid crc value [ 249.289714][ T6709] F2FS-fs (loop0): Found nat_bits in checkpoint [ 249.464271][ T6709] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 249.532140][ T5469] usb 3-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 249.571240][ T5469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.587408][ T3824] device hsr_slave_0 left promiscuous mode [ 249.607336][ T3824] device hsr_slave_1 left promiscuous mode [ 249.607632][ T6719] loop3: detected capacity change from 0 to 32768 [ 249.638525][ T5469] usb 3-1: config 0 descriptor?? [ 249.665142][ T3824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.687387][ T3824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.702701][ T5469] lan78xx 3-1:0.0 (unnamed net_device) (uninitialized): USB bus speed not supported [ 249.720623][ T6719] XFS: attr2 mount option is deprecated. [ 249.734502][ T5469] lan78xx: probe of 3-1:0.0 failed with error -5 [ 249.761866][ T6719] XFS: noikeep mount option is deprecated. [ 249.782904][ T3824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.790774][ T3824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.826439][ T6719] XFS (loop3): Mounting V5 Filesystem [ 249.846484][ T3824] device bridge_slave_0 left promiscuous mode [ 249.887760][ T3824] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.929483][ T3591] usb 3-1: USB disconnect, device number 9 [ 249.964522][ T6719] XFS (loop3): Ending clean mount [ 250.002984][ T6719] XFS (loop3): Quotacheck needed: Please wait. [ 250.091891][ T3824] device veth1_macvtap left promiscuous mode [ 250.108758][ T6719] XFS (loop3): Quotacheck: Done. [ 250.139096][ T3824] device veth0_macvtap left promiscuous mode [ 250.167794][ T3824] device veth1_vlan left promiscuous mode [ 250.219950][ T3824] device veth0_vlan left promiscuous mode [ 250.410408][ T3557] XFS (loop3): Unmounting Filesystem [ 250.771943][ T6735] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.966'. [ 251.238973][ T6740] loop0: detected capacity change from 0 to 512 [ 251.330164][ T6740] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 251.478682][ T6740] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 251.593741][ T6740] EXT4-fs (loop0): 1 truncate cleaned up [ 251.599593][ T6740] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 251.851974][ T3591] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 252.117646][ T3591] usb 4-1: Using ep0 maxpacket: 8 [ 252.348799][ T3824] team0 (unregistering): Port device team_slave_1 removed [ 252.434597][ T3824] team0 (unregistering): Port device team_slave_0 removed [ 252.478034][ T3591] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=71.5a [ 252.505912][ T3591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.517733][ T3591] usb 4-1: Product: syz [ 252.527204][ T3591] usb 4-1: Manufacturer: syz [ 252.534432][ T3591] usb 4-1: SerialNumber: syz [ 252.540985][ T3591] usb 4-1: config 0 descriptor?? [ 252.570960][ T3824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.595384][ T3591] ati_remote2 4-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint [ 252.722779][ T6439] EXT4-fs (loop0): unmounting filesystem. [ 252.815954][ T3591] usb 4-1: USB disconnect, device number 10 [ 252.882967][ T3824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.248133][ T3564] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.263575][ T3561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.272763][ T6654] bio_check_eod: 2735 callbacks suppressed [ 253.272781][ T6654] syz.1.941: attempt to access beyond end of device [ 253.272781][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.286696][ T3564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.293365][ T6654] syz.1.941: attempt to access beyond end of device [ 253.293365][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.303358][ T3561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.316088][ T6654] syz.1.941: attempt to access beyond end of device [ 253.316088][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.322702][ T3564] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 253.335864][ T6654] syz.1.941: attempt to access beyond end of device [ 253.335864][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.356817][ T3564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.358551][ T6654] syz.1.941: attempt to access beyond end of device [ 253.358551][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.378539][ T6654] syz.1.941: attempt to access beyond end of device [ 253.378539][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.394853][ T6654] syz.1.941: attempt to access beyond end of device [ 253.394853][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.409565][ T6654] syz.1.941: attempt to access beyond end of device [ 253.409565][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.425831][ T6654] syz.1.941: attempt to access beyond end of device [ 253.425831][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.440596][ T6654] syz.1.941: attempt to access beyond end of device [ 253.440596][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.578191][ T3554] Bluetooth: hci5: command tx timeout [ 255.605429][ T6763] loop0: detected capacity change from 0 to 8 [ 256.407919][ T6761] loop3: detected capacity change from 0 to 256 [ 256.419705][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.432883][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.450222][ T6761] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 256.489795][ T6763] Filesystem uses "lzma" compression. This is not supported [ 256.760943][ T6765] loop3: detected capacity change from 0 to 512 [ 256.775348][ T6765] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.975: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 256.831449][ T6765] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.975: couldn't read orphan inode 15 (err -117) [ 256.861101][ T6765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 256.887144][ T6765] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038 (0x7fffffff) [ 257.325259][ T3824] bond0 (unregistering): Released all slaves [ 257.625182][ T3554] Bluetooth: hci5: command tx timeout [ 257.751741][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.975'. [ 257.883008][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.976732][ T3557] EXT4-fs (loop3): unmounting filesystem. [ 258.000259][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.125597][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.134756][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.145510][ T6775] loop2: detected capacity change from 0 to 1024 [ 258.202119][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.211064][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.275564][ T6775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.281785][ T6654] bio_check_eod: 2702 callbacks suppressed [ 258.281809][ T6654] syz.1.941: attempt to access beyond end of device [ 258.281809][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 258.293808][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.305378][ T6654] syz.1.941: attempt to access beyond end of device [ 258.305378][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 258.311770][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.327959][ T6654] syz.1.941: attempt to access beyond end of device [ 258.327959][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 258.347241][ T6654] syz.1.941: attempt to access beyond end of device [ 258.347241][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 258.363450][ T6654] syz.1.941: attempt to access beyond end of device [ 258.363450][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 258.378333][ T6654] syz.1.941: attempt to access beyond end of device [ 258.378333][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 258.394957][ T6654] syz.1.941: attempt to access beyond end of device [ 258.394957][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 258.409580][ T6654] syz.1.941: attempt to access beyond end of device [ 258.409580][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 258.425708][ T6654] syz.1.941: attempt to access beyond end of device [ 258.425708][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 258.440364][ T6654] syz.1.941: attempt to access beyond end of device [ 258.440364][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 258.457767][ T6775] EXT4-fs error (device loop2): ext4_get_inode_usage:834: inode #2: comm syz.2.978: corrupted in-inode xattr [ 258.573573][ T6775] EXT4-fs (loop2): Remounting filesystem read-only [ 258.583452][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.616222][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.632859][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.640086][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.692552][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.742917][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.838054][ T3656] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 258.879674][ T3656] Quota error (device loop2): write_blk: dquota write failed [ 258.906844][ T5368] EXT4-fs (loop2): unmounting filesystem. [ 258.917002][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.925683][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.952287][ T3656] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 258.983736][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.002849][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.029592][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.060167][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.085008][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.109984][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.137238][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.167294][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.256995][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.341973][ T5045] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 259.622033][ T5045] usb 4-1: Using ep0 maxpacket: 8 [ 259.659121][ T6787] loop2: detected capacity change from 0 to 512 [ 259.702152][ T3554] Bluetooth: hci5: command tx timeout [ 259.722159][ T6753] chnl_net:caif_netlink_parms(): no params data found [ 259.752132][ T5045] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 259.772136][ T5045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.833367][ T6787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 259.860076][ T5045] usb 4-1: config 0 descriptor?? [ 259.876110][ T6787] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038 (0x7fffffff) [ 260.052570][ T6773] loop0: detected capacity change from 0 to 40427 [ 260.111984][ T26] audit: type=1804 audit(1720738307.854:13): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.981" name="/newroot/81/file0/bus" dev="loop2" ino=15 res=1 errno=0 [ 260.146649][ T6773] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 260.213859][ T6773] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 260.233654][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.261430][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.272686][ T26] audit: type=1804 audit(1720738307.924:14): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.981" name="/newroot/81/file0/bus" dev="loop2" ino=15 res=1 errno=0 [ 260.336776][ T6753] device bridge_slave_0 entered promiscuous mode [ 260.347892][ T5368] EXT4-fs (loop2): unmounting filesystem. [ 260.373476][ T6773] F2FS-fs (loop0): Found nat_bits in checkpoint [ 260.434265][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.489105][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.502530][ T5045] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 260.541825][ T5045] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 260.581856][ T6753] device bridge_slave_1 entered promiscuous mode [ 260.621914][ T5045] asix: probe of 4-1:0.0 failed with error -32 [ 260.699944][ T6773] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 260.729262][ T6773] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.753515][ T6777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.979'. [ 260.845553][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.882514][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.895774][ T6753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.939993][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.994697][ T6753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.205236][ T6800] loop2: detected capacity change from 0 to 8192 [ 261.259329][ T6753] team0: Port device team_slave_0 added [ 261.306564][ T6753] team0: Port device team_slave_1 added [ 261.352562][ T6800] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 261.418290][ T6800] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 261.470293][ T6800] REISERFS (device loop2): using ordered data mode [ 261.516054][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.534988][ T6800] reiserfs: using flush barriers [ 261.575314][ T6800] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 261.594094][ T6800] REISERFS (device loop2): checking transaction log (loop2) [ 261.601954][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.605533][ T6800] REISERFS (device loop2): Using r5 hash to sort names [ 261.686921][ T6800] reiserfs: enabling write barrier flush mode [ 261.766767][ T6800] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 261.792639][ T3554] Bluetooth: hci5: command tx timeout [ 261.840846][ T6753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.920213][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.970506][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.090436][ T6753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.299669][ T6753] device hsr_slave_0 entered promiscuous mode [ 262.332917][ T6753] device hsr_slave_1 entered promiscuous mode [ 262.357305][ T6753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.385810][ T6753] Cannot create hsr debugfs directory [ 262.575785][ T5041] usb 4-1: USB disconnect, device number 11 [ 263.135445][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.182927][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.292232][ T6654] bio_check_eod: 2694 callbacks suppressed [ 263.292256][ T6654] syz.1.941: attempt to access beyond end of device [ 263.292256][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 263.313542][ T6654] syz.1.941: attempt to access beyond end of device [ 263.313542][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 263.329864][ T6654] syz.1.941: attempt to access beyond end of device [ 263.329864][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 263.344669][ T6654] syz.1.941: attempt to access beyond end of device [ 263.344669][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 263.361196][ T6654] syz.1.941: attempt to access beyond end of device [ 263.361196][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 263.375946][ T6654] syz.1.941: attempt to access beyond end of device [ 263.375946][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 263.392081][ T6654] syz.1.941: attempt to access beyond end of device [ 263.392081][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 263.407524][ T6654] syz.1.941: attempt to access beyond end of device [ 263.407524][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 263.423910][ T6654] syz.1.941: attempt to access beyond end of device [ 263.423910][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 263.438768][ T6654] syz.1.941: attempt to access beyond end of device [ 263.438768][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 263.477416][ T6753] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.682924][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.691473][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.884776][ T6753] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.965965][ T6551] device veth0_vlan entered promiscuous mode [ 264.054500][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.074302][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.367196][ T6753] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.492472][ T6551] device veth1_vlan entered promiscuous mode [ 268.303160][ T6654] bio_check_eod: 3800 callbacks suppressed [ 268.303178][ T6654] syz.1.941: attempt to access beyond end of device [ 268.303178][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 268.324715][ T6654] syz.1.941: attempt to access beyond end of device [ 268.324715][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 268.340078][ T6654] syz.1.941: attempt to access beyond end of device [ 268.340078][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 268.354481][ T6654] syz.1.941: attempt to access beyond end of device [ 268.354481][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 268.370674][ T6654] syz.1.941: attempt to access beyond end of device [ 268.370674][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 268.385075][ T6654] syz.1.941: attempt to access beyond end of device [ 268.385075][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 268.400503][ T6654] syz.1.941: attempt to access beyond end of device [ 268.400503][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 268.415870][ T6654] syz.1.941: attempt to access beyond end of device [ 268.415870][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 268.431777][ T6654] syz.1.941: attempt to access beyond end of device [ 268.431777][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 268.446166][ T6654] syz.1.941: attempt to access beyond end of device [ 268.446166][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 268.600893][ T6753] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.588453][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.604720][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.602660][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.312169][ T6654] bio_check_eod: 4171 callbacks suppressed [ 273.312186][ T6654] syz.1.941: attempt to access beyond end of device [ 273.312186][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 273.334303][ T6654] syz.1.941: attempt to access beyond end of device [ 273.334303][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 273.349070][ T6654] syz.1.941: attempt to access beyond end of device [ 273.349070][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 273.364479][ T6654] syz.1.941: attempt to access beyond end of device [ 273.364479][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 273.378966][ T6654] syz.1.941: attempt to access beyond end of device [ 273.378966][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 273.394202][ T6654] syz.1.941: attempt to access beyond end of device [ 273.394202][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 273.408703][ T6654] syz.1.941: attempt to access beyond end of device [ 273.408703][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 273.424023][ T6654] syz.1.941: attempt to access beyond end of device [ 273.424023][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 273.438575][ T6654] syz.1.941: attempt to access beyond end of device [ 273.438575][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 273.453862][ T6654] syz.1.941: attempt to access beyond end of device [ 273.453862][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 273.602960][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.604596][ T6551] device veth0_macvtap entered promiscuous mode [ 274.682399][ T6551] device veth1_macvtap entered promiscuous mode [ 276.579928][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.669242][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.791935][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.631171][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.708398][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.780579][ T3564] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.793022][ T3564] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.802192][ T3564] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.810156][ T3564] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.822269][ T3561] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.829697][ T3561] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.860917][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.941858][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.011946][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.111874][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.188867][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.278893][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.289233][ T3561] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.300096][ T3561] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.309269][ T5468] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 278.317877][ T3563] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.322410][ T6654] bio_check_eod: 3710 callbacks suppressed [ 278.322428][ T6654] syz.1.941: attempt to access beyond end of device [ 278.322428][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 278.325890][ T3563] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.333657][ T6654] syz.1.941: attempt to access beyond end of device [ 278.333657][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 278.348930][ T3563] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.352596][ T6654] syz.1.941: attempt to access beyond end of device [ 278.352596][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 278.366096][ T3563] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.375085][ T6654] syz.1.941: attempt to access beyond end of device [ 278.375085][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 278.390319][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.393554][ T6654] syz.1.941: attempt to access beyond end of device [ 278.393554][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 278.432005][ T6654] syz.1.941: attempt to access beyond end of device [ 278.432005][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 278.446615][ T6654] syz.1.941: attempt to access beyond end of device [ 278.446615][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 278.463060][ T6654] syz.1.941: attempt to access beyond end of device [ 278.463060][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 278.477736][ T6654] syz.1.941: attempt to access beyond end of device [ 278.477736][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 278.494062][ T6654] syz.1.941: attempt to access beyond end of device [ 278.494062][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 278.534402][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.598546][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.636825][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.582285][ T5468] usb 1-1: Using ep0 maxpacket: 8 [ 279.603244][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.689238][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.710261][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.722352][ T5468] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 279.731460][ T5468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.747479][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.766998][ T5468] usb 1-1: config 0 descriptor?? [ 279.774406][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.853305][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.861990][ T3563] Bluetooth: hci6: command tx timeout [ 279.952823][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.969214][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.001082][ T6551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.081789][ T6551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.091114][ T6551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.168727][ T6551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.578093][ T3563] Bluetooth: hci7: command tx timeout [ 280.662574][ T5468] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 280.674559][ T5468] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 280.685594][ T5468] asix: probe of 1-1:0.0 failed with error -32 [ 282.565274][ T3563] Bluetooth: hci6: command tx timeout [ 282.662474][ T3563] Bluetooth: hci7: command tx timeout [ 283.332226][ T6654] bio_check_eod: 3917 callbacks suppressed [ 283.332244][ T6654] syz.1.941: attempt to access beyond end of device [ 283.332244][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 283.353299][ T6654] syz.1.941: attempt to access beyond end of device [ 283.353299][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 283.369219][ T6654] syz.1.941: attempt to access beyond end of device [ 283.369219][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 283.384453][ T6654] syz.1.941: attempt to access beyond end of device [ 283.384453][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 283.399856][ T6654] syz.1.941: attempt to access beyond end of device [ 283.399856][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 283.414613][ T6654] syz.1.941: attempt to access beyond end of device [ 283.414613][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 283.430338][ T6654] syz.1.941: attempt to access beyond end of device [ 283.430338][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 283.444947][ T6654] syz.1.941: attempt to access beyond end of device [ 283.444947][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 283.460295][ T6654] syz.1.941: attempt to access beyond end of device [ 283.460295][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 283.476057][ T6654] syz.1.941: attempt to access beyond end of device [ 283.476057][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 283.602659][ T6838] netlink: 44 bytes leftover after parsing attributes in process `syz.0.993'. [ 284.584361][ T3563] Bluetooth: hci6: command tx timeout [ 284.741869][ T3563] Bluetooth: hci7: command tx timeout [ 286.602224][ T5469] usb 1-1: USB disconnect, device number 9 [ 286.662081][ T3563] Bluetooth: hci6: command tx timeout [ 286.821898][ T3563] Bluetooth: hci7: command tx timeout [ 287.611408][ T6845] loop0: detected capacity change from 0 to 128 [ 288.342443][ T6654] bio_check_eod: 4122 callbacks suppressed [ 288.342460][ T6654] syz.1.941: attempt to access beyond end of device [ 288.342460][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 288.362801][ T6654] syz.1.941: attempt to access beyond end of device [ 288.362801][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 288.378095][ T6654] syz.1.941: attempt to access beyond end of device [ 288.378095][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 288.393587][ T6654] syz.1.941: attempt to access beyond end of device [ 288.393587][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 288.408845][ T6654] syz.1.941: attempt to access beyond end of device [ 288.408845][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 288.423232][ T6654] syz.1.941: attempt to access beyond end of device [ 288.423232][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 288.438475][ T6654] syz.1.941: attempt to access beyond end of device [ 288.438475][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 288.453364][ T6654] syz.1.941: attempt to access beyond end of device [ 288.453364][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 288.468588][ T6654] syz.1.941: attempt to access beyond end of device [ 288.468588][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 288.483238][ T6654] syz.1.941: attempt to access beyond end of device [ 288.483238][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 290.654486][ T4761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.698529][ T4761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.820948][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 290.854717][ T3656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.891868][ T3656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.076367][ T1105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.170908][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 291.190328][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 291.248849][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 291.392837][ T1105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.481609][ T6753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.754095][ T1105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.857336][ T6753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.972953][ T1105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.058465][ T6753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 292.113045][ T6753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.303865][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.328357][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.373034][ T6840] device bridge_slave_0 entered promiscuous mode [ 292.462458][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.469681][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.503157][ T6840] device bridge_slave_1 entered promiscuous mode [ 292.576585][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.598161][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.632783][ T6835] device bridge_slave_0 entered promiscuous mode [ 292.709822][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.741937][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.772049][ T6835] device bridge_slave_1 entered promiscuous mode [ 292.789707][ T6854] loop0: detected capacity change from 0 to 32768 [ 292.862737][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.887015][ T6854] XFS (loop0): Mounting V5 Filesystem [ 292.952312][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.044443][ T6854] XFS (loop0): Ending clean mount [ 293.180231][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.242023][ T6854] syz.0.997 (6854) used greatest stack depth: 17848 bytes left [ 293.353431][ T6654] bio_check_eod: 3204 callbacks suppressed [ 293.353450][ T6654] syz.1.941: attempt to access beyond end of device [ 293.353450][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 293.355885][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.360044][ T6654] syz.1.941: attempt to access beyond end of device [ 293.360044][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 293.398612][ T6654] syz.1.941: attempt to access beyond end of device [ 293.398612][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 293.414128][ T6654] syz.1.941: attempt to access beyond end of device [ 293.414128][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 293.430200][ T6654] syz.1.941: attempt to access beyond end of device [ 293.430200][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 293.437383][ T6439] XFS (loop0): Unmounting Filesystem [ 293.444949][ T6654] syz.1.941: attempt to access beyond end of device [ 293.444949][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 293.466015][ T6654] syz.1.941: attempt to access beyond end of device [ 293.466015][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 293.481381][ T6654] syz.1.941: attempt to access beyond end of device [ 293.481381][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 293.497911][ T6654] syz.1.941: attempt to access beyond end of device [ 293.497911][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 293.513285][ T6654] syz.1.941: attempt to access beyond end of device [ 293.513285][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 293.554407][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.637898][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.688073][ T6840] team0: Port device team_slave_0 added [ 293.711354][ T6886] syz.4.1003[6886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.711475][ T6886] syz.4.1003[6886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.791532][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.961398][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.016987][ T6840] team0: Port device team_slave_1 added [ 294.116295][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.271550][ T6835] team0: Port device team_slave_0 added [ 294.320936][ T6753] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.355261][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.392764][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.428652][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.443729][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.746128][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.763121][ T6835] team0: Port device team_slave_1 added [ 294.773513][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.784217][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.793448][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.800742][ T5045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.612683][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.619703][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.647090][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.751034][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.817460][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.833429][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.866525][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.895119][ T5469] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.902534][ T5469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.949572][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.990390][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.073910][ T6896] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 296.194965][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.221515][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.255462][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.305733][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.355215][ T6904] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 296.402996][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.420160][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.446350][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.517288][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 296.541195][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.603816][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.614237][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.625614][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.641449][ T6753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.654497][ T6753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.709599][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.731783][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.763107][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.908758][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.341084][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.370627][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.430095][ T6840] device hsr_slave_0 entered promiscuous mode [ 297.485597][ T6840] device hsr_slave_1 entered promiscuous mode [ 297.519024][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.558331][ T6840] Cannot create hsr debugfs directory [ 297.603217][ T6835] device hsr_slave_0 entered promiscuous mode [ 297.663847][ T6835] device hsr_slave_1 entered promiscuous mode [ 297.694468][ T6835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.752184][ T6835] Cannot create hsr debugfs directory [ 298.251861][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 298.364282][ T6654] bio_check_eod: 2372 callbacks suppressed [ 298.364323][ T6654] syz.1.941: attempt to access beyond end of device [ 298.364323][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 298.385030][ T6654] syz.1.941: attempt to access beyond end of device [ 298.385030][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 298.401811][ T6654] syz.1.941: attempt to access beyond end of device [ 298.401811][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 298.416647][ T6654] syz.1.941: attempt to access beyond end of device [ 298.416647][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 298.433403][ T6654] syz.1.941: attempt to access beyond end of device [ 298.433403][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 298.448267][ T6654] syz.1.941: attempt to access beyond end of device [ 298.448267][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 298.464437][ T6654] syz.1.941: attempt to access beyond end of device [ 298.464437][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 298.479130][ T6654] syz.1.941: attempt to access beyond end of device [ 298.479130][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 298.495751][ T6654] syz.1.941: attempt to access beyond end of device [ 298.495751][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 298.510573][ T6654] syz.1.941: attempt to access beyond end of device [ 298.510573][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 298.558812][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.566613][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 298.576988][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.604689][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.641968][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.642058][ T7] usb 5-1: no configurations [ 301.642073][ T7] usb 5-1: can't read configurations, error -22 [ 302.011783][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 302.031720][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 302.182379][ T7] usb 5-1: device descriptor read/64, error -32 [ 302.304132][ T7] usb usb5-port1: attempt power cycle [ 302.711804][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 302.781811][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 302.781987][ T7] usb 5-1: device descriptor read/8, error -32 [ 303.051778][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 303.121862][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 303.122077][ T7] usb 5-1: device descriptor read/8, error -32 [ 303.242108][ T7] usb usb5-port1: unable to enumerate USB device [ 303.372436][ T6654] bio_check_eod: 3980 callbacks suppressed [ 303.372453][ T6654] syz.1.941: attempt to access beyond end of device [ 303.372453][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 303.372919][ T6654] syz.1.941: attempt to access beyond end of device [ 303.372919][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 303.374685][ T6654] syz.1.941: attempt to access beyond end of device [ 303.374685][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 303.375143][ T6654] syz.1.941: attempt to access beyond end of device [ 303.375143][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 303.376903][ T6654] syz.1.941: attempt to access beyond end of device [ 303.376903][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 303.377365][ T6654] syz.1.941: attempt to access beyond end of device [ 303.377365][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 303.379084][ T6654] syz.1.941: attempt to access beyond end of device [ 303.379084][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 303.379546][ T6654] syz.1.941: attempt to access beyond end of device [ 303.379546][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 303.381265][ T6654] syz.1.941: attempt to access beyond end of device [ 303.381265][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 303.381856][ T6654] syz.1.941: attempt to access beyond end of device [ 303.381856][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 305.616294][ T1105] bond1: (slave ip6gretap1): Releasing active interface [ 305.616329][ T1105] device ip6gretap1 left promiscuous mode [ 308.382554][ T6654] bio_check_eod: 4120 callbacks suppressed [ 308.382571][ T6654] syz.1.941: attempt to access beyond end of device [ 308.382571][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 308.383064][ T6654] syz.1.941: attempt to access beyond end of device [ 308.383064][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 308.384856][ T6654] syz.1.941: attempt to access beyond end of device [ 308.384856][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 308.385555][ T6654] syz.1.941: attempt to access beyond end of device [ 308.385555][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 308.387452][ T6654] syz.1.941: attempt to access beyond end of device [ 308.387452][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 308.387929][ T6654] syz.1.941: attempt to access beyond end of device [ 308.387929][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 308.389825][ T6654] syz.1.941: attempt to access beyond end of device [ 308.389825][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 308.390327][ T6654] syz.1.941: attempt to access beyond end of device [ 308.390327][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 308.392636][ T6654] syz.1.941: attempt to access beyond end of device [ 308.392636][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 308.393355][ T6654] syz.1.941: attempt to access beyond end of device [ 308.393355][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 313.391763][ T6654] bio_check_eod: 3987 callbacks suppressed [ 313.391779][ T6654] syz.1.941: attempt to access beyond end of device [ 313.391779][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 313.393594][ T6654] syz.1.941: attempt to access beyond end of device [ 313.393594][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 313.394059][ T6654] syz.1.941: attempt to access beyond end of device [ 313.394059][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 313.395821][ T6654] syz.1.941: attempt to access beyond end of device [ 313.395821][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 313.396278][ T6654] syz.1.941: attempt to access beyond end of device [ 313.396278][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 313.397997][ T6654] syz.1.941: attempt to access beyond end of device [ 313.397997][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 313.398453][ T6654] syz.1.941: attempt to access beyond end of device [ 313.398453][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 313.400189][ T6654] syz.1.941: attempt to access beyond end of device [ 313.400189][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 313.400652][ T6654] syz.1.941: attempt to access beyond end of device [ 313.400652][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 313.402467][ T6654] syz.1.941: attempt to access beyond end of device [ 313.402467][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 314.600159][ T3563] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 314.619858][ T3563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.632869][ T3564] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.637006][ T3564] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.638069][ T3564] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.638892][ T3564] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.639449][ T3564] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 314.639746][ T3564] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.662507][ T6933] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 317.145867][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.145957][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.782277][ T3564] Bluetooth: hci4: command tx timeout [ 317.814182][ T3564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.831892][ T3564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.833705][ T3564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.834631][ T3564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.835224][ T3564] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 317.835519][ T3564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.402928][ T6654] bio_check_eod: 4089 callbacks suppressed [ 318.402945][ T6654] syz.1.941: attempt to access beyond end of device [ 318.402945][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 318.403407][ T6654] syz.1.941: attempt to access beyond end of device [ 318.403407][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 318.405144][ T6654] syz.1.941: attempt to access beyond end of device [ 318.405144][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 318.405609][ T6654] syz.1.941: attempt to access beyond end of device [ 318.405609][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 318.407328][ T6654] syz.1.941: attempt to access beyond end of device [ 318.407328][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 318.407785][ T6654] syz.1.941: attempt to access beyond end of device [ 318.407785][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 318.409505][ T6654] syz.1.941: attempt to access beyond end of device [ 318.409505][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 318.409968][ T6654] syz.1.941: attempt to access beyond end of device [ 318.409968][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 318.411810][ T6654] syz.1.941: attempt to access beyond end of device [ 318.411810][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 318.412479][ T6654] syz.1.941: attempt to access beyond end of device [ 318.412479][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 319.862079][ T3563] Bluetooth: hci0: command tx timeout [ 319.862794][ T3563] Bluetooth: hci4: command tx timeout [ 321.942043][ T3564] Bluetooth: hci4: command tx timeout [ 321.942089][ T3564] Bluetooth: hci0: command tx timeout [ 323.412064][ T6654] bio_check_eod: 4202 callbacks suppressed [ 323.412081][ T6654] syz.1.941: attempt to access beyond end of device [ 323.412081][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 323.412549][ T6654] syz.1.941: attempt to access beyond end of device [ 323.412549][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 323.414276][ T6654] syz.1.941: attempt to access beyond end of device [ 323.414276][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 323.414737][ T6654] syz.1.941: attempt to access beyond end of device [ 323.414737][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 323.416456][ T6654] syz.1.941: attempt to access beyond end of device [ 323.416456][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 323.416922][ T6654] syz.1.941: attempt to access beyond end of device [ 323.416922][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 323.418646][ T6654] syz.1.941: attempt to access beyond end of device [ 323.418646][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 323.419104][ T6654] syz.1.941: attempt to access beyond end of device [ 323.419104][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 323.420821][ T6654] syz.1.941: attempt to access beyond end of device [ 323.420821][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 323.421278][ T6654] syz.1.941: attempt to access beyond end of device [ 323.421278][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 323.642984][ T3564] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.652859][ T3564] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.654794][ T3564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.655646][ T3564] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.656182][ T3564] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 323.656473][ T3564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.021963][ T3564] Bluetooth: hci0: command tx timeout [ 324.022009][ T3564] Bluetooth: hci4: command tx timeout [ 325.701942][ T3563] Bluetooth: hci1: command tx timeout [ 326.102166][ T3564] Bluetooth: hci0: command tx timeout [ 327.782121][ T3563] Bluetooth: hci1: command tx timeout [ 328.422047][ T6654] bio_check_eod: 4192 callbacks suppressed [ 328.422065][ T6654] syz.1.941: attempt to access beyond end of device [ 328.422065][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 328.422611][ T6654] syz.1.941: attempt to access beyond end of device [ 328.422611][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 328.424383][ T6654] syz.1.941: attempt to access beyond end of device [ 328.424383][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 328.424840][ T6654] syz.1.941: attempt to access beyond end of device [ 328.424840][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 328.426569][ T6654] syz.1.941: attempt to access beyond end of device [ 328.426569][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 328.427039][ T6654] syz.1.941: attempt to access beyond end of device [ 328.427039][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 328.428758][ T6654] syz.1.941: attempt to access beyond end of device [ 328.428758][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 328.429219][ T6654] syz.1.941: attempt to access beyond end of device [ 328.429219][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 328.430965][ T6654] syz.1.941: attempt to access beyond end of device [ 328.430965][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 328.431422][ T6654] syz.1.941: attempt to access beyond end of device [ 328.431422][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 329.861870][ T3564] Bluetooth: hci1: command tx timeout [ 331.941766][ T3563] Bluetooth: hci1: command tx timeout [ 333.432744][ T6654] bio_check_eod: 4234 callbacks suppressed [ 333.432762][ T6654] syz.1.941: attempt to access beyond end of device [ 333.432762][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 333.433230][ T6654] syz.1.941: attempt to access beyond end of device [ 333.433230][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 333.434958][ T6654] syz.1.941: attempt to access beyond end of device [ 333.434958][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 333.435421][ T6654] syz.1.941: attempt to access beyond end of device [ 333.435421][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 333.437137][ T6654] syz.1.941: attempt to access beyond end of device [ 333.437137][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 333.437599][ T6654] syz.1.941: attempt to access beyond end of device [ 333.437599][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 333.439649][ T6654] syz.1.941: attempt to access beyond end of device [ 333.439649][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 333.440292][ T6654] syz.1.941: attempt to access beyond end of device [ 333.440292][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 333.442362][ T6654] syz.1.941: attempt to access beyond end of device [ 333.442362][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 333.443066][ T6654] syz.1.941: attempt to access beyond end of device [ 333.443066][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 337.833578][ T3554] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.836645][ T3554] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.837688][ T3554] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.839192][ T3554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.841489][ T3554] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.845253][ T3554] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.845561][ T3554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.847284][ T3554] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.849798][ T3564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.870415][ T3564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.873110][ T3564] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.873431][ T3564] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.442338][ T6654] bio_check_eod: 3996 callbacks suppressed [ 338.442356][ T6654] syz.1.941: attempt to access beyond end of device [ 338.442356][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 338.442818][ T6654] syz.1.941: attempt to access beyond end of device [ 338.442818][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 338.444541][ T6654] syz.1.941: attempt to access beyond end of device [ 338.444541][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 338.445004][ T6654] syz.1.941: attempt to access beyond end of device [ 338.445004][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 338.446723][ T6654] syz.1.941: attempt to access beyond end of device [ 338.446723][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 338.447198][ T6654] syz.1.941: attempt to access beyond end of device [ 338.447198][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 338.448920][ T6654] syz.1.941: attempt to access beyond end of device [ 338.448920][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 338.449378][ T6654] syz.1.941: attempt to access beyond end of device [ 338.449378][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 338.451127][ T6654] syz.1.941: attempt to access beyond end of device [ 338.451127][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 338.451583][ T6654] syz.1.941: attempt to access beyond end of device [ 338.451583][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 339.862217][ T3563] Bluetooth: hci5: command tx timeout [ 339.941834][ T3564] Bluetooth: hci3: command tx timeout [ 341.941992][ T3563] Bluetooth: hci5: command tx timeout [ 342.021773][ T3564] Bluetooth: hci3: command tx timeout [ 343.451727][ T6654] bio_check_eod: 4266 callbacks suppressed [ 343.451746][ T6654] syz.1.941: attempt to access beyond end of device [ 343.451746][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 343.452207][ T6654] syz.1.941: attempt to access beyond end of device [ 343.452207][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 343.453936][ T6654] syz.1.941: attempt to access beyond end of device [ 343.453936][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 343.454397][ T6654] syz.1.941: attempt to access beyond end of device [ 343.454397][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 343.456118][ T6654] syz.1.941: attempt to access beyond end of device [ 343.456118][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 343.456615][ T6654] syz.1.941: attempt to access beyond end of device [ 343.456615][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 343.458335][ T6654] syz.1.941: attempt to access beyond end of device [ 343.458335][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 343.458797][ T6654] syz.1.941: attempt to access beyond end of device [ 343.458797][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 343.460520][ T6654] syz.1.941: attempt to access beyond end of device [ 343.460520][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 343.460976][ T6654] syz.1.941: attempt to access beyond end of device [ 343.460976][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 344.022206][ T3564] Bluetooth: hci5: command tx timeout [ 344.101781][ T3554] Bluetooth: hci3: command tx timeout [ 344.821857][ T3564] Bluetooth: hci2: command 0x0406 tx timeout [ 346.101903][ T3554] Bluetooth: hci5: command tx timeout [ 346.181840][ T3563] Bluetooth: hci3: command tx timeout [ 348.462555][ T6654] bio_check_eod: 4256 callbacks suppressed [ 348.462572][ T6654] syz.1.941: attempt to access beyond end of device [ 348.462572][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 348.463041][ T6654] syz.1.941: attempt to access beyond end of device [ 348.463041][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 348.464783][ T6654] syz.1.941: attempt to access beyond end of device [ 348.464783][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 348.465246][ T6654] syz.1.941: attempt to access beyond end of device [ 348.465246][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 348.466966][ T6654] syz.1.941: attempt to access beyond end of device [ 348.466966][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 348.467426][ T6654] syz.1.941: attempt to access beyond end of device [ 348.467426][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 348.469167][ T6654] syz.1.941: attempt to access beyond end of device [ 348.469167][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 348.469624][ T6654] syz.1.941: attempt to access beyond end of device [ 348.469624][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 348.471354][ T6654] syz.1.941: attempt to access beyond end of device [ 348.471354][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 348.472053][ T6654] syz.1.941: attempt to access beyond end of device [ 348.472053][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 351.885499][ T6935] chnl_net:caif_netlink_parms(): no params data found [ 353.471906][ T6654] bio_check_eod: 4094 callbacks suppressed [ 353.471923][ T6654] syz.1.941: attempt to access beyond end of device [ 353.471923][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 353.472385][ T6654] syz.1.941: attempt to access beyond end of device [ 353.472385][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 353.474113][ T6654] syz.1.941: attempt to access beyond end of device [ 353.474113][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 353.474575][ T6654] syz.1.941: attempt to access beyond end of device [ 353.474575][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 353.476291][ T6654] syz.1.941: attempt to access beyond end of device [ 353.476291][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 353.476751][ T6654] syz.1.941: attempt to access beyond end of device [ 353.476751][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 353.478468][ T6654] syz.1.941: attempt to access beyond end of device [ 353.478468][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 353.478929][ T6654] syz.1.941: attempt to access beyond end of device [ 353.478929][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 353.480652][ T6654] syz.1.941: attempt to access beyond end of device [ 353.480652][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 353.481107][ T6654] syz.1.941: attempt to access beyond end of device [ 353.481107][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 354.658853][ T6941] chnl_net:caif_netlink_parms(): no params data found [ 354.669009][ T6938] chnl_net:caif_netlink_parms(): no params data found [ 357.617401][ T1105] device hsr_slave_0 left promiscuous mode [ 357.618016][ T1105] device hsr_slave_1 left promiscuous mode [ 357.622971][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.623046][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.623853][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.623888][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.624528][ T1105] device bridge_slave_1 left promiscuous mode [ 357.624689][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.626495][ T1105] device bridge_slave_0 left promiscuous mode [ 357.626636][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.653581][ T1105] device hsr_slave_0 left promiscuous mode [ 357.658122][ T1105] device hsr_slave_1 left promiscuous mode [ 357.658834][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.658908][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.659654][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.659689][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.660312][ T1105] device bridge_slave_1 left promiscuous mode [ 357.660441][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.663037][ T1105] device bridge_slave_0 left promiscuous mode [ 357.663180][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.482725][ T6654] bio_check_eod: 4236 callbacks suppressed [ 358.482742][ T6654] syz.1.941: attempt to access beyond end of device [ 358.482742][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 358.483217][ T6654] syz.1.941: attempt to access beyond end of device [ 358.483217][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 358.484946][ T6654] syz.1.941: attempt to access beyond end of device [ 358.484946][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 358.485407][ T6654] syz.1.941: attempt to access beyond end of device [ 358.485407][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 358.487136][ T6654] syz.1.941: attempt to access beyond end of device [ 358.487136][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 358.487595][ T6654] syz.1.941: attempt to access beyond end of device [ 358.487595][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 358.489328][ T6654] syz.1.941: attempt to access beyond end of device [ 358.489328][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 358.489789][ T6654] syz.1.941: attempt to access beyond end of device [ 358.489789][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 358.491507][ T6654] syz.1.941: attempt to access beyond end of device [ 358.491507][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 358.492221][ T6654] syz.1.941: attempt to access beyond end of device [ 358.492221][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 359.660980][ T1105] device veth1_macvtap left promiscuous mode [ 359.661047][ T1105] device veth0_macvtap left promiscuous mode [ 359.661179][ T1105] device veth1_vlan left promiscuous mode [ 359.672637][ T1105] device veth0_vlan left promiscuous mode [ 359.678993][ T1105] device veth1_macvtap left promiscuous mode [ 359.679058][ T1105] device veth0_macvtap left promiscuous mode [ 359.679195][ T1105] device veth1_vlan left promiscuous mode [ 359.679255][ T1105] device veth0_vlan left promiscuous mode [ 363.492555][ T6654] bio_check_eod: 4222 callbacks suppressed [ 363.492581][ T6654] syz.1.941: attempt to access beyond end of device [ 363.492581][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 363.493103][ T6654] syz.1.941: attempt to access beyond end of device [ 363.493103][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 363.494851][ T6654] syz.1.941: attempt to access beyond end of device [ 363.494851][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 363.495314][ T6654] syz.1.941: attempt to access beyond end of device [ 363.495314][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 363.497037][ T6654] syz.1.941: attempt to access beyond end of device [ 363.497037][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 363.497496][ T6654] syz.1.941: attempt to access beyond end of device [ 363.497496][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 363.499214][ T6654] syz.1.941: attempt to access beyond end of device [ 363.499214][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 363.499671][ T6654] syz.1.941: attempt to access beyond end of device [ 363.499671][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 363.501493][ T6654] syz.1.941: attempt to access beyond end of device [ 363.501493][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 363.502298][ T6654] syz.1.941: attempt to access beyond end of device [ 363.502298][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 368.502288][ T6654] bio_check_eod: 4242 callbacks suppressed [ 368.502305][ T6654] syz.1.941: attempt to access beyond end of device [ 368.502305][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 368.502766][ T6654] syz.1.941: attempt to access beyond end of device [ 368.502766][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 368.504495][ T6654] syz.1.941: attempt to access beyond end of device [ 368.504495][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 368.504952][ T6654] syz.1.941: attempt to access beyond end of device [ 368.504952][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 368.506676][ T6654] syz.1.941: attempt to access beyond end of device [ 368.506676][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 368.507156][ T6654] syz.1.941: attempt to access beyond end of device [ 368.507156][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 368.508910][ T6654] syz.1.941: attempt to access beyond end of device [ 368.508910][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 368.509418][ T6654] syz.1.941: attempt to access beyond end of device [ 368.509418][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 368.511173][ T6654] syz.1.941: attempt to access beyond end of device [ 368.511173][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 368.511720][ T6654] syz.1.941: attempt to access beyond end of device [ 368.511720][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 368.593657][ T1105] bond2 (unregistering): Released all slaves [ 371.595738][ T1105] bond1 (unregistering): Released all slaves [ 373.064095][ T3563] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 373.076732][ T3563] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 373.086313][ T3563] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 373.095998][ T3563] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 373.104377][ T3564] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 373.112251][ T3564] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 373.514466][ T6654] bio_check_eod: 3088 callbacks suppressed [ 373.514490][ T6654] syz.1.941: attempt to access beyond end of device [ 373.514490][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 373.535020][ T6654] syz.1.941: attempt to access beyond end of device [ 373.535020][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 373.551881][ T6654] syz.1.941: attempt to access beyond end of device [ 373.551881][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 373.566621][ T6654] syz.1.941: attempt to access beyond end of device [ 373.566621][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 373.615284][ T6654] syz.1.941: attempt to access beyond end of device [ 373.615284][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 373.630302][ T6654] syz.1.941: attempt to access beyond end of device [ 373.630302][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 373.646705][ T6654] syz.1.941: attempt to access beyond end of device [ 373.646705][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 373.661417][ T6654] syz.1.941: attempt to access beyond end of device [ 373.661417][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 373.677869][ T6654] syz.1.941: attempt to access beyond end of device [ 373.677869][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 373.693692][ T6654] syz.1.941: attempt to access beyond end of device [ 373.693692][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 373.808762][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 373.908484][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 374.006273][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.109341][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.153775][ T3554] Bluetooth: hci6: command tx timeout [ 375.203435][ T3564] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.215069][ T3564] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.225283][ T3564] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.235372][ T3564] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.243170][ T3564] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 375.250673][ T3564] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 375.401034][ T1105] bond0 (unregistering): Released all slaves [ 376.437357][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 376.535861][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 376.658809][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.752805][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.224159][ T3554] Bluetooth: hci6: command tx timeout [ 377.307542][ T3554] Bluetooth: hci7: command tx timeout [ 377.861099][ T1105] bond0 (unregistering): Released all slaves [ 378.035994][ T6935] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.081950][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.112078][ T6935] device bridge_slave_0 entered promiscuous mode [ 378.522456][ T6654] bio_check_eod: 2786 callbacks suppressed [ 378.522476][ T6654] syz.1.941: attempt to access beyond end of device [ 378.522476][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 378.543065][ T6654] syz.1.941: attempt to access beyond end of device [ 378.543065][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 378.559400][ T6654] syz.1.941: attempt to access beyond end of device [ 378.559400][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 378.574392][ T6654] syz.1.941: attempt to access beyond end of device [ 378.574392][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 378.599237][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.605584][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.615057][ T6654] syz.1.941: attempt to access beyond end of device [ 378.615057][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 378.629812][ T6654] syz.1.941: attempt to access beyond end of device [ 378.629812][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 378.646244][ T6654] syz.1.941: attempt to access beyond end of device [ 378.646244][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 378.660853][ T6654] syz.1.941: attempt to access beyond end of device [ 378.660853][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 378.676521][ T6654] syz.1.941: attempt to access beyond end of device [ 378.676521][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 378.691210][ T6654] syz.1.941: attempt to access beyond end of device [ 378.691210][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 379.301872][ T3554] Bluetooth: hci6: command tx timeout [ 379.381884][ T3554] Bluetooth: hci7: command tx timeout [ 379.881536][ T6946] chnl_net:caif_netlink_parms(): no params data found [ 379.909304][ T6945] chnl_net:caif_netlink_parms(): no params data found [ 380.106248][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.114194][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.132829][ T6941] device bridge_slave_0 entered promiscuous mode [ 380.172091][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.179318][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.202810][ T6941] device bridge_slave_1 entered promiscuous mode [ 380.410289][ T6941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.495924][ T6941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.512115][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.519241][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.543462][ T6946] device bridge_slave_0 entered promiscuous mode [ 380.552113][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.559284][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.697822][ T6945] device bridge_slave_0 entered promiscuous mode [ 380.811844][ T6946] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.819053][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.871890][ T6946] device bridge_slave_1 entered promiscuous mode [ 380.893344][ T6945] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.900484][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.954354][ T6945] device bridge_slave_1 entered promiscuous mode [ 381.019996][ T6970] chnl_net:caif_netlink_parms(): no params data found [ 381.300484][ T6946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.360336][ T6945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.385521][ T3554] Bluetooth: hci6: command tx timeout [ 381.414400][ T6946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.462046][ T3554] Bluetooth: hci7: command tx timeout [ 381.515085][ T6967] chnl_net:caif_netlink_parms(): no params data found [ 381.545311][ T3564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.556607][ T3563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.567010][ T3564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.576778][ T3563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.584841][ T3563] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 381.593810][ T3564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.621492][ T6945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.807774][ T6945] team0: Port device team_slave_0 added [ 381.866616][ T6946] team0: Port device team_slave_0 added [ 381.892865][ T6945] team0: Port device team_slave_1 added [ 381.933118][ T6946] team0: Port device team_slave_1 added [ 382.077265][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.091881][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.149658][ T6945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.183065][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.190062][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.282167][ T6946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.302905][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.310107][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.333348][ T6970] device bridge_slave_0 entered promiscuous mode [ 382.346959][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.361981][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.405098][ T6945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.438008][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.445911][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.489152][ T6946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.516455][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.531824][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.551959][ T6970] device bridge_slave_1 entered promiscuous mode [ 382.764137][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.771294][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.811940][ T6967] device bridge_slave_0 entered promiscuous mode [ 382.834983][ T6970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.851558][ T6945] device hsr_slave_0 entered promiscuous mode [ 382.899789][ T6945] device hsr_slave_1 entered promiscuous mode [ 382.912628][ T6945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.920420][ T6945] Cannot create hsr debugfs directory [ 382.954736][ T6946] device hsr_slave_0 entered promiscuous mode [ 382.966617][ T6946] device hsr_slave_1 entered promiscuous mode [ 382.982868][ T6946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.990480][ T6946] Cannot create hsr debugfs directory [ 383.012105][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.019248][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.043107][ T6967] device bridge_slave_1 entered promiscuous mode [ 383.054080][ T6970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.284944][ T6967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.353136][ T6970] team0: Port device team_slave_0 added [ 383.425488][ T6967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.478124][ T6970] team0: Port device team_slave_1 added [ 383.533338][ T6654] bio_check_eod: 2784 callbacks suppressed [ 383.533357][ T6654] syz.1.941: attempt to access beyond end of device [ 383.533357][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 383.553859][ T6654] syz.1.941: attempt to access beyond end of device [ 383.553859][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 383.562227][ T3563] Bluetooth: hci7: command tx timeout [ 383.570278][ T6654] syz.1.941: attempt to access beyond end of device [ 383.570278][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 383.613083][ T6654] syz.1.941: attempt to access beyond end of device [ 383.613083][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 383.630373][ T6654] syz.1.941: attempt to access beyond end of device [ 383.630373][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 383.632006][ T3563] Bluetooth: hci0: command tx timeout [ 383.645414][ T6654] syz.1.941: attempt to access beyond end of device [ 383.645414][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 383.666331][ T6654] syz.1.941: attempt to access beyond end of device [ 383.666331][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 383.681445][ T6654] syz.1.941: attempt to access beyond end of device [ 383.681445][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 383.697722][ T6654] syz.1.941: attempt to access beyond end of device [ 383.697722][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 383.712569][ T6654] syz.1.941: attempt to access beyond end of device [ 383.712569][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 383.736000][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.762202][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.872283][ T6970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.937653][ T6967] team0: Port device team_slave_0 added [ 383.966295][ T6988] chnl_net:caif_netlink_parms(): no params data found [ 383.994485][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.001494][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.091867][ T6970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.129865][ T6967] team0: Port device team_slave_1 added [ 384.354637][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.372029][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.441664][ T6967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.568574][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.576875][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.771800][ T6967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.814289][ T6970] device hsr_slave_0 entered promiscuous mode [ 384.833701][ T6970] device hsr_slave_1 entered promiscuous mode [ 384.861926][ T6970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.869545][ T6970] Cannot create hsr debugfs directory [ 385.198197][ T6967] device hsr_slave_0 entered promiscuous mode [ 385.233664][ T6967] device hsr_slave_1 entered promiscuous mode [ 385.261753][ T6967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.269373][ T6967] Cannot create hsr debugfs directory [ 385.302753][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.309903][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.343137][ T6988] device bridge_slave_0 entered promiscuous mode [ 385.404003][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.411161][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.443057][ T6988] device bridge_slave_1 entered promiscuous mode [ 385.638033][ T6988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.701950][ T3563] Bluetooth: hci0: command tx timeout [ 385.721280][ T6988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.755828][ T6945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.925546][ T6945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 386.005262][ T6988] team0: Port device team_slave_0 added [ 386.020075][ T6945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 386.076809][ T6988] team0: Port device team_slave_1 added [ 386.102689][ T6945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 386.225831][ T6946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 386.265386][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.275201][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.362235][ T6988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.535229][ T6946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 386.564078][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.571173][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.663006][ T6988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.712740][ T6946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 386.793458][ T6946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 387.009280][ T6988] device hsr_slave_0 entered promiscuous mode [ 387.025157][ T6988] device hsr_slave_1 entered promiscuous mode [ 387.044534][ T6988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.062047][ T6988] Cannot create hsr debugfs directory [ 387.372210][ T6945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.468730][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.482654][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.510776][ T6945] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.562185][ T6946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.642076][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.662360][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.682037][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.689436][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.723151][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.742370][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.762201][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.769371][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.781903][ T3563] Bluetooth: hci0: command tx timeout [ 387.818234][ T6946] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.925108][ T6967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.977311][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.988104][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.015634][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.038252][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.053007][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.164038][ T6967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.204581][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.213765][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.232597][ T5041] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.239816][ T5041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.268318][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.288247][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.312464][ T5041] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.319627][ T5041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.348518][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.368142][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.393040][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.412579][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.429648][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.460674][ T6945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.494193][ T6945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.541851][ T6654] bio_check_eod: 2699 callbacks suppressed [ 388.541874][ T6654] syz.1.941: attempt to access beyond end of device [ 388.541874][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 388.564108][ T6654] syz.1.941: attempt to access beyond end of device [ 388.564108][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 388.603900][ T6967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.615016][ T6654] syz.1.941: attempt to access beyond end of device [ 388.615016][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 388.631358][ T6654] syz.1.941: attempt to access beyond end of device [ 388.631358][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 388.636761][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.646712][ T6654] syz.1.941: attempt to access beyond end of device [ 388.646712][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 388.669269][ T6654] syz.1.941: attempt to access beyond end of device [ 388.669269][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 388.682593][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.684002][ T6654] syz.1.941: attempt to access beyond end of device [ 388.684002][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 388.692856][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.706791][ T6654] syz.1.941: attempt to access beyond end of device [ 388.706791][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 388.726769][ T6654] syz.1.941: attempt to access beyond end of device [ 388.726769][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 388.743766][ T6654] syz.1.941: attempt to access beyond end of device [ 388.743766][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 388.755447][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.783457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.802273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.822281][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.839389][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.863255][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 389.224894][ T6967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.287566][ T6946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.321816][ T6946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.373813][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 389.384054][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 389.402973][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 389.422628][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 389.442479][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 389.451336][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.472861][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 389.492238][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.857611][ T1105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.869750][ T3563] Bluetooth: hci0: command tx timeout [ 389.954490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 390.439440][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.462400][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.490545][ T6967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 390.531417][ T6945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.628073][ T6967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 390.703761][ T1105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.758229][ T6967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 390.846499][ T1105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.880645][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 390.902873][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.926326][ T6967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 391.003969][ T1105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.043736][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 391.051507][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 391.089154][ T6946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.131284][ T6945] device veth0_vlan entered promiscuous mode [ 391.152864][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 391.172676][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 391.237383][ T6945] device veth1_vlan entered promiscuous mode [ 391.262077][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 391.270752][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 391.296895][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 391.392615][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 391.402567][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 391.432638][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 391.487911][ T6945] device veth0_macvtap entered promiscuous mode [ 391.531902][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 391.540851][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 391.578247][ T6946] device veth0_vlan entered promiscuous mode [ 391.630641][ T6945] device veth1_macvtap entered promiscuous mode [ 391.670287][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 391.680856][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 391.712700][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 391.742461][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 391.769139][ T6946] device veth1_vlan entered promiscuous mode [ 391.815751][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 391.832710][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 391.862702][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 391.919601][ T6967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.960094][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.971976][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.015274][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.052727][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.081963][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.112174][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.153706][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.170517][ T6946] device veth0_macvtap entered promiscuous mode [ 392.251861][ T6967] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.259050][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 392.272876][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.303539][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.332678][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 392.362493][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.392316][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 392.423814][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.444343][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.481938][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.511877][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.542457][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.572213][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.611395][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.642102][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.655292][ T6946] device veth1_macvtap entered promiscuous mode [ 392.702054][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 392.712830][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 392.742281][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.762337][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.792301][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.822524][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.852129][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.859279][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.897112][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 392.932499][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.962508][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.969665][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.014641][ T6945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.041748][ T6945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.050636][ T6945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.101695][ T6945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.146351][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 393.156895][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.182624][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.213463][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.244300][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.281678][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.302101][ T28] INFO: task syz.1.941:6672 blocked for more than 143 seconds. [ 393.309793][ T28] Not tainted 6.1.98-syzkaller #0 [ 393.321655][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 393.331541][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.361713][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.370451][ T28] task:syz.1.941 state:D stack:25856 pid:6672 ppid:6265 flags:0x00004004 [ 393.441679][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.453201][ T28] Call Trace: [ 393.456522][ T28] [ 393.459480][ T28] __schedule+0x142d/0x4550 [ 393.501893][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.512862][ T28] ? __sched_text_start+0x8/0x8 [ 393.517781][ T28] ? print_irqtrace_events+0x210/0x210 [ 393.548854][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.552408][ T6654] bio_check_eod: 2671 callbacks suppressed [ 393.552428][ T6654] syz.1.941: attempt to access beyond end of device [ 393.552428][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 393.564706][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 393.613093][ T6654] syz.1.941: attempt to access beyond end of device [ 393.613093][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 393.623869][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.629826][ T6654] syz.1.941: attempt to access beyond end of device [ 393.629826][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 393.648554][ T6654] syz.1.941: attempt to access beyond end of device [ 393.648554][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 393.665509][ T6654] syz.1.941: attempt to access beyond end of device [ 393.665509][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 393.680174][ T6654] syz.1.941: attempt to access beyond end of device [ 393.680174][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 393.696473][ T6654] syz.1.941: attempt to access beyond end of device [ 393.696473][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 393.711434][ T6654] syz.1.941: attempt to access beyond end of device [ 393.711434][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 393.727665][ T6654] syz.1.941: attempt to access beyond end of device [ 393.727665][ T6654] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 393.742377][ T6654] syz.1.941: attempt to access beyond end of device [ 393.742377][ T6654] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 393.751671][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 393.812242][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 393.821367][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 393.848169][ T28] schedule+0xbf/0x180 [ 393.858825][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 393.881715][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 393.887718][ T28] ? down_write_killable_nested+0x90/0x90 [ 393.943271][ T28] ? read_lock_is_recursive+0x10/0x10 [ 393.948728][ T28] ? ima_lsm_policy_change+0x620/0x620 [ 393.983319][ T28] ? rwsem_write_trylock+0x166/0x210 [ 393.988781][ T28] ? clear_nonspinnable+0x60/0x60 [ 394.023516][ T28] process_measurement+0x446/0x21b0 [ 394.028809][ T28] ? mark_lock+0x9a/0x340 [ 394.052347][ T28] ? ima_file_mmap+0x1c0/0x1c0 [ 394.057241][ T28] ? dquot_initialize+0x20/0x20 [ 394.091876][ T28] ? aa_get_current_label+0x111/0x1d0 [ 394.097338][ T28] ? apparmor_current_getsecid_subj+0xac/0x110 [ 394.121690][ T28] ima_file_check+0xed/0x170 [ 394.126393][ T28] ? do_dentry_open+0xce4/0x10f0 [ 394.131454][ T28] ? ima_bprm_check+0x2b0/0x2b0 [ 394.182551][ T28] path_openat+0x2687/0x2e60 [ 394.187411][ T28] ? mark_lock+0x9a/0x340 [ 394.211741][ T28] ? do_filp_open+0x480/0x480 [ 394.216526][ T28] do_filp_open+0x230/0x480 [ 394.221068][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 394.252479][ T28] ? _raw_spin_unlock+0x24/0x40 [ 394.257508][ T28] ? alloc_fd+0x59c/0x640 [ 394.282020][ T28] do_sys_openat2+0x13b/0x4f0 [ 394.291946][ T28] ? do_sys_open+0x220/0x220 [ 394.296618][ T28] __x64_sys_openat+0x243/0x290 [ 394.301516][ T28] ? __ia32_sys_open+0x270/0x270 [ 394.345737][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 394.361984][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 394.372853][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 394.378911][ T28] do_syscall_64+0x3b/0xb0 [ 394.422559][ T28] ? clear_bhb_loop+0x45/0xa0 [ 394.427329][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.453990][ T28] RIP: 0033:0x7fb118b75bd9 [ 394.458485][ T28] RSP: 002b:00007fb119970048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 394.492065][ T28] RAX: ffffffffffffffda RBX: 00007fb118d04038 RCX: 00007fb118b75bd9 [ 394.500200][ T28] RDX: 0000000000183341 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 394.542453][ T28] RBP: 00007fb118be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 394.550495][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.590591][ T28] R13: 000000000000006e R14: 00007fb118d04038 R15: 00007ffcc6824c48 [ 394.621771][ T28] [ 394.624855][ T28] INFO: task syz.1.941:6673 blocked for more than 144 seconds. [ 394.662685][ T28] Not tainted 6.1.98-syzkaller #0 [ 394.668287][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.707286][ T28] task:syz.1.941 state:D stack:26040 pid:6673 ppid:6265 flags:0x00004004 [ 394.741653][ T28] Call Trace: [ 394.745076][ T28] [ 394.748034][ T28] __schedule+0x142d/0x4550 [ 394.794136][ T28] ? __sched_text_start+0x8/0x8 [ 394.799077][ T28] ? print_irqtrace_events+0x210/0x210 [ 394.811684][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 394.816868][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 394.851657][ T28] schedule+0xbf/0x180 [ 394.855799][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 394.861557][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 394.899063][ T28] ? down_write_killable_nested+0x90/0x90 [ 394.931822][ T28] ? read_lock_is_recursive+0x10/0x10 [ 394.937297][ T28] ? rwsem_write_trylock+0x166/0x210 [ 394.961873][ T28] ? clear_nonspinnable+0x60/0x60 [ 394.967510][ T28] f2fs_issue_checkpoint+0x2d2/0x4d0 [ 395.001787][ T28] ? f2fs_destroy_checkpoint_caches+0x20/0x20 [ 395.007959][ T28] ? d_instantiate_new+0x7b/0x110 [ 395.042033][ T28] ? f2fs_create+0x7a7/0xa10 [ 395.046711][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 395.072049][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 395.077174][ T28] ? f2fs_sync_fs+0x201/0x410 [ 395.101986][ T28] f2fs_create+0x862/0xa10 [ 395.106491][ T28] ? f2fs_lookup+0xae0/0xae0 [ 395.111130][ T28] path_openat+0x12f1/0x2e60 [ 395.146207][ T28] ? do_filp_open+0x480/0x480 [ 395.151277][ T28] do_filp_open+0x230/0x480 [ 395.181694][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 395.192375][ T28] ? _raw_spin_unlock+0x24/0x40 [ 395.197445][ T28] ? alloc_fd+0x59c/0x640 [ 395.224647][ T28] do_sys_openat2+0x13b/0x4f0 [ 395.229431][ T28] ? do_sys_open+0x220/0x220 [ 395.251664][ T28] __x64_sys_openat+0x243/0x290 [ 395.256600][ T28] ? __ia32_sys_open+0x270/0x270 [ 395.261581][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 395.287739][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 395.321771][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 395.327924][ T28] do_syscall_64+0x3b/0xb0 [ 395.353861][ T28] ? clear_bhb_loop+0x45/0xa0 [ 395.358713][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.391430][ T28] RIP: 0033:0x7fb118b75bd9 [ 395.402160][ T28] RSP: 002b:00007fb11994f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 395.410640][ T28] RAX: ffffffffffffffda RBX: 00007fb118d04110 RCX: 00007fb118b75bd9 [ 395.465828][ T28] RDX: 00000000000026e1 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 395.481681][ T28] RBP: 00007fb118be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 395.489718][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.542889][ T28] R13: 000000000000006e R14: 00007fb118d04110 R15: 00007ffcc6824c48 [ 395.550958][ T28] [ 395.575487][ T28] [ 395.575487][ T28] Showing all locks held in the system: [ 395.588618][ T28] 1 lock held by rcu_tasks_kthre/12: [ 395.611787][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 395.641848][ T28] 1 lock held by rcu_tasks_trace/13: [ 395.647226][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 395.696671][ T28] 1 lock held by khungtaskd/28: [ 395.731987][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 395.761789][ T28] 5 locks held by kworker/u4:5/1105: [ 395.767163][ T28] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 395.812275][ T28] #1: ffffc90004ec7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 395.841717][ T28] #2: ffffffff8e28d8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 395.851141][ T28] #3: ffff88807994f2f8 (&devlink->lock_key#9){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x130/0x2c0 [ 395.911922][ T28] #4: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 395.943111][ T28] 2 locks held by getty/3307: [ 395.947850][ T28] #0: ffff88814bb1b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 396.001850][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 396.023173][ T28] 4 locks held by kworker/u4:14/4712: [ 396.028606][ T28] #0: ffff888143e45138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 396.082027][ T28] #1: ffffc9000b8e7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 396.111868][ T28] #2: ffff888025e1c0e0 (&type->s_umount_key#93){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 396.152058][ T28] #3: ffff88807c319140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 396.182196][ T28] 2 locks held by kworker/0:15/5468: [ 396.187542][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 396.234185][ T28] #1: ffffc9000389fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 396.271745][ T28] 4 locks held by syz.1.941/6654: [ 396.276912][ T28] 2 locks held by syz.1.941/6672: [ 396.301838][ T28] #0: ffff888025e1c460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 396.311181][ T28] #1: ffff888058613690 (&sb->s_type->i_mutex_key#37){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0 [ 396.371657][ T28] 3 locks held by syz.1.941/6673: [ 396.376742][ T28] #0: ffff888025e1c460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 396.411889][ T28] #1: ffff888058612db0 (&type->i_mutex_dir_key#22){+.+.}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 396.451025][ T28] #2: ffff88807c319140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_issue_checkpoint+0x2d2/0x4d0 [ 396.481996][ T28] 1 lock held by syz-executor/6945: [ 396.487257][ T28] #0: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 396.541966][ T28] 3 locks held by syz-executor/6970: [ 396.547583][ T28] 5 locks held by syz-executor/6988: [ 396.553610][ T28] #0: ffff88807e068460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 396.580296][ T28] #1: ffff88805e711488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 396.620471][ T28] #2: ffff888144797748 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 396.641844][ T28] #3: ffffffff8dc0cf88 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480 [ 396.662134][ T28] #4: ffff88807994e0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880 [ 396.701647][ T28] [ 396.704026][ T28] ============================================= [ 396.704026][ T28] [ 396.741738][ T28] NMI backtrace for cpu 0 [ 396.746130][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 396.753956][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 396.764030][ T28] Call Trace: [ 396.767321][ T28] [ 396.770269][ T28] dump_stack_lvl+0x1e3/0x2cb [ 396.774985][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 396.780476][ T28] ? panic+0x764/0x764 [ 396.784573][ T28] ? vprintk_emit+0x622/0x740 [ 396.789282][ T28] ? printk_sprint+0x490/0x490 [ 396.794075][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 396.799219][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 396.804195][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 396.810414][ T28] ? _printk+0xd1/0x111 [ 396.814611][ T28] ? panic+0x764/0x764 [ 396.818727][ T28] ? __wake_up_klogd+0xcc/0x100 [ 396.823612][ T28] ? panic+0x764/0x764 [ 396.827719][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 396.833920][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 396.840026][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 396.846099][ T28] watchdog+0xf88/0xfd0 [ 396.850303][ T28] ? watchdog+0x1f8/0xfd0 [ 396.854671][ T28] kthread+0x28d/0x320 [ 396.858806][ T28] ? hungtask_pm_notify+0x50/0x50 [ 396.863886][ T28] ? kthread_blkcg+0xd0/0xd0 [ 396.868496][ T28] ret_from_fork+0x1f/0x30 [ 396.872959][ T28] [ 396.877035][ T28] Sending NMI from CPU 0 to CPUs 1: [ 396.882568][ C1] NMI backtrace for cpu 1 [ 396.882580][ C1] CPU: 1 PID: 6654 Comm: syz.1.941 Not tainted 6.1.98-syzkaller #0 [ 396.882598][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 396.882609][ C1] RIP: 0010:mark_lock+0x9a/0x340 [ 396.882640][ C1] Code: 28 84 c0 0f 85 29 02 00 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 20 c2 49 90 be 08 00 00 00 e8 c6 44 77 00 <48> 0f a3 1d 3e eb de 0e 73 11 48 8d 04 5b 48 c1 e0 06 48 8d 98 20 [ 396.882655][ C1] RSP: 0018:ffffc90003266738 EFLAGS: 00000056 [ 396.882671][ C1] RAX: 0000000000000001 RBX: 0000000000000d8f RCX: ffffffff816ad6da [ 396.882683][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9049c3d0 [ 396.882695][ C1] RBP: 0000000000000007 R08: dffffc0000000000 R09: fffffbfff209387b [ 396.882708][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801b2ca898 [ 396.882720][ C1] R13: dffffc0000000000 R14: 0000000000000080 R15: ffff88801b2ca940 [ 396.882733][ C1] FS: 00007fb1199916c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 396.882749][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.882761][ C1] CR2: 000000002002c000 CR3: 000000006473a000 CR4: 00000000003506e0 [ 396.882776][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.882787][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 396.882797][ C1] Call Trace: [ 396.882802][ C1] [ 396.882808][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 396.882836][ C1] ? read_lock_is_recursive+0x10/0x10 [ 396.882863][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 396.882898][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 396.882925][ C1] ? nmi_handle+0x12e/0x440 [ 396.882951][ C1] ? nmi_handle+0x25/0x440 [ 396.882976][ C1] ? mark_lock+0x9a/0x340 [ 396.883000][ C1] ? default_do_nmi+0x62/0x150 [ 396.883017][ C1] ? exc_nmi+0xa8/0x100 [ 396.883034][ C1] ? end_repeat_nmi+0x16/0x31 [ 396.883062][ C1] ? mark_lock+0x9a/0x340 [ 396.883087][ C1] ? mark_lock+0x9a/0x340 [ 396.883111][ C1] ? mark_lock+0x9a/0x340 [ 396.883136][ C1] ? mark_lock+0x9a/0x340 [ 396.883160][ C1] [ 396.883165][ C1] [ 396.883173][ C1] __lock_acquire+0xc50/0x1f80 [ 396.883204][ C1] lock_acquire+0x1f8/0x5a0 [ 396.883227][ C1] ? do_garbage_collect+0x21ed/0x81f0 [ 396.883258][ C1] ? read_lock_is_recursive+0x10/0x10 [ 396.883284][ C1] ? __might_sleep+0xb0/0xb0 [ 396.883303][ C1] ? do_garbage_collect+0x5ce4/0x81f0 [ 396.883332][ C1] down_read+0xad/0xa30 [ 396.883348][ C1] ? do_garbage_collect+0x21ed/0x81f0 [ 396.883377][ C1] ? do_garbage_collect+0x22d7/0x81f0 [ 396.883403][ C1] ? __down_common+0x8b0/0x8b0 [ 396.883421][ C1] ? __up_read+0x2b9/0x690 [ 396.883449][ C1] ? up_read+0x20/0x20 [ 396.883474][ C1] do_garbage_collect+0x21ed/0x81f0 [ 396.883531][ C1] ? f2fs_gc+0x32a0/0x32a0 [ 396.883555][ C1] ? get_victim_by_default+0x6893/0x6ff0 [ 396.883578][ C1] ? mark_lock+0x9a/0x340 [ 396.883611][ C1] ? f2fs_gc+0xef4/0x32a0 [ 396.883636][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 396.883668][ C1] ? up_write+0x19d/0x580 [ 396.883693][ C1] ? get_ckpt_valid_blocks+0x260/0x260 [ 396.883712][ C1] ? __up_read+0x690/0x690 [ 396.883737][ C1] f2fs_gc+0x1169/0x32a0 [ 396.883778][ C1] ? f2fs_start_bidx_of_node+0x370/0x370 [ 396.883814][ C1] ? rwsem_write_trylock+0x166/0x210 [ 396.883845][ C1] f2fs_balance_fs+0x506/0x6c0 [ 396.883870][ C1] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 396.883896][ C1] ? __up_read+0x2b9/0x690 [ 396.883919][ C1] ? folio_unlock+0x122/0x2f0 [ 396.883949][ C1] f2fs_map_blocks+0x2871/0x3ab0 [ 396.883984][ C1] ? f2fs_do_map_lock+0x70/0x70 [ 396.884010][ C1] expand_inode_data+0x56d/0xaf0 [ 396.884035][ C1] ? f2fs_insert_range+0x3c0/0x3c0 [ 396.884051][ C1] ? file_modified_flags+0x3e1/0x480 [ 396.884083][ C1] ? rcu_read_lock_any_held+0xb3/0x160 [ 396.884110][ C1] f2fs_fallocate+0x44a/0x9f0 [ 396.884140][ C1] vfs_fallocate+0x547/0x6b0 [ 396.884166][ C1] do_vfs_ioctl+0x222c/0x2a90 [ 396.884184][ C1] ? __x64_compat_sys_ioctl+0x80/0x80 [ 396.884201][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 396.884225][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 396.884247][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 396.884272][ C1] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 396.884291][ C1] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 396.884310][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 396.884353][ C1] ? __fget_files+0x28/0x4a0 [ 396.884378][ C1] ? __fget_files+0x28/0x4a0 [ 396.884394][ C1] ? __fget_files+0x435/0x4a0 [ 396.884411][ C1] ? __fget_files+0x28/0x4a0 [ 396.884430][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 396.884453][ C1] ? security_file_ioctl+0x7d/0xa0 [ 396.884472][ C1] __se_sys_ioctl+0x81/0x160 [ 396.884500][ C1] do_syscall_64+0x3b/0xb0 [ 396.884525][ C1] ? clear_bhb_loop+0x45/0xa0 [ 396.884551][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.884576][ C1] RIP: 0033:0x7fb118b75bd9 [ 396.884591][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.884605][ C1] RSP: 002b:00007fb119991048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.884622][ C1] RAX: ffffffffffffffda RBX: 00007fb118d03f60 RCX: 00007fb118b75bd9 [ 396.884636][ C1] RDX: 00000000200000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 396.884647][ C1] RBP: 00007fb118be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 396.884658][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.884669][ C1] R13: 000000000000000b R14: 00007fb118d03f60 R15: 00007ffcc6824c48 [ 396.884688][ C1] [ 397.771743][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 397.778648][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 397.786480][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 397.796645][ T28] Call Trace: [ 397.799937][ T28] [ 397.802882][ T28] dump_stack_lvl+0x1e3/0x2cb [ 397.807604][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 397.813097][ T28] ? panic+0x764/0x764 [ 397.817190][ T28] ? llist_add_batch+0x160/0x1d0 [ 397.822171][ T28] ? vscnprintf+0x59/0x80 [ 397.826530][ T28] panic+0x318/0x764 [ 397.830450][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 397.836648][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 397.842051][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 397.848249][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 397.854448][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 397.860639][ T28] watchdog+0xfc7/0xfd0 [ 397.864827][ T28] ? watchdog+0x1f8/0xfd0 [ 397.869185][ T28] kthread+0x28d/0x320 [ 397.873266][ T28] ? hungtask_pm_notify+0x50/0x50 [ 397.878317][ T28] ? kthread_blkcg+0xd0/0xd0 [ 397.882951][ T28] ret_from_fork+0x1f/0x30 [ 397.887422][ T28] [ 397.890749][ T28] Kernel Offset: disabled [ 397.895080][ T28] Rebooting in 86400 seconds..